RE: nat problem [7:55537]
Hi, Looking at this, there appears to be no dynamic routing happening. The gateway of last resort is on a different network than E0/0 and E0/1. Can you actually reach 10.1.255.254 by any other means ? Regards Richard Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=55542t=55537 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: nat problem [7:55537]
Two comments I would like to make. 1. Richard, the gateway of last resort IS on the same network as E0/0. The subnet mask is 255.255.0.0. 2. The route you added tells the router that 1.1.1.1 is out interface E0/0. It's on E0/1. So that definitely won't work. If you remove the NAT statements, are you able to ping everything on both sides? If not, then you have a routing issue. If so, then it is something else. Is there something missing from this config, like access-lists, etc. that may be causing the problems? If you are just wanting to NAT the one IP address, the first ip NAT line and the associated access-list are unnecessary. Try removing them from the config and see what happens. bbfaye wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... hi eb, I met a problem here: a Cicsco 2611#: Router#show running-config Building configuration... Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname Router ! ! ip subnet-zero ! interface Ethernet0/0 ip address 10.1.2.3 255.255.0.0 no ip directed-broadcast ip nat outside ! interface Ethernet0/1 ip address 192.168.1.254 255.255.255.0 no ip directed-broadcast ip nat inside ! ip nat inside source list 10 interface Ethernet0/0 overload ip nat inside source static 192.168.1.1 1.1.1.1 ip classless ip route 0.0.0.0 0.0.0.0 10.1.255.254 no ip http server ! access-list 10 permit 192.168.1.0 0.0.0.255 ! line con 0 transport input none line aux 0 line vty 0 4 login ! end Router# - the server 1.1.1.1 can be connected fine from the outside network, but if a host 192.168.1.5 from inside network want to ping 1.1.1.1, it fail with timeout. I thought it was the problem that nat creation address was not learn by the router so I add : ip route 1.1.1.1 255.255.255.255 e0/0.it still not work. why.?how can I fix it? ! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=1t=55537 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: nat problem [7:55537]
sorry Robert,I did add the route of 1.1.1.1 on interface e0/1 at 14 Oct 2002 14:08:08 - , [EMAIL PROTECTED] (Robert Edmonds) wrote: -- Two comments I would like to make. 1. Richard, the gateway of last resort IS on the same network as E0/0. The subnet mask is 255.255.0.0. 2. The route you added tells the router that 1.1.1.1 is out interface E0/0. about the e0/0 ,it's my written mistake. It's on E0/1. So that definitely won't work. If you remove the NAT statements, are you able to ping everything on both sides? If not, then you have a routing issue. If so, then it is something else. Is there something missing from this config, like access-lists, etc. that may be causing the problems? If you are just wanting to NAT the one IP address, the first ip NAT line and the associated access-list are unnecessary. Try removing them from the config and see what happens. bbfaye wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... hi eb, I met a problem here: a Cicsco 2611#: Router#show running-config Building configuration... Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname Router ! ! ip subnet-zero ! interface Ethernet0/0 ip address 10.1.2.3 255.255.0.0 no ip directed-broadcast ip nat outside ! interface Ethernet0/1 ip address 192.168.1.254 255.255.255.0 no ip directed-broadcast ip nat inside ! ip nat inside source list 10 interface Ethernet0/0 overload ip nat inside source static 192.168.1.1 1.1.1.1 ip classless ip route 0.0.0.0 0.0.0.0 10.1.255.254 no ip http server ! access-list 10 permit 192.168.1.0 0.0.0.255 ! line con 0 transport input none line aux 0 line vty 0 4 login ! end Router# - the server 1.1.1.1 can be connected fine from the outside network, but if a host 192.168.1.5 from inside network want to ping 1.1.1.1, it fail with timeout. I thought it was the problem that nat creation address was not learn by the router so I add : ip route 1.1.1.1 255.255.255.255 e0/0.it still not work. why.?how can I fix it? ! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=8t=55537 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: nat problem [7:55537]
Richard, Can't be. We geeks don't do that. And if we do, we never admit it. Richard Botham wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Robert, Apologies - comes from reading too quickly :) Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=55565t=55537 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: nat problem [7:55537]
Robert, Apologies - comes from reading too quickly :) Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=55564t=55537 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]